Prisma Access Agent "Cannot reach server" Error

laurence64 — Sun, 02 Aug 2026 08:23:53 GMT

Hi All,

I recently ran into this problem and resolved it so thought I would share it here.

I am currently running a POC for PAA and had installed it with no issues on a MAC, when I can to install on Windows11 I got the above error, after digging into the CLI with epm status command the issue seemed to be an SSL handshake error caused, it seems, by the presence of a self-signed cert in the chain.

The problem actually was that the PAA requires two Go-Daddy certs to be present in the endpoints trusted root cert store for the enrolment to be successful these are,

Go Daddy Root Certificate Authority - G2 (root CA) and the Go Daddy Secure Certificate Authority - G2 (intermediate CA) which for some reason were not present ion my version of Windows11 home edition.

This is from this page in the techdocs CA Certificate Requirements for Endpoint Manager Enrollment once installed all worked exactly as it should.

My main reason for posting this is the error message is completely misleading and had me wasting hours looking through firewall logs and windows firewall logs to see why the endpoint could not reach the server, so I thought I would try and save others the time.

topic Prisma Access Agent "Cannot reach server" Error in Prisma Access Agent Discussions

Prisma Access Agent "Cannot reach server" Error